Date: Wed, 9 Mar 2011 14:06:06 -0600 (CST) From: Robert Bonomi <bonomi@mail.r-bonomi.com> To: freebsd-questions@freebsd.org, peter@vfemail.net Subject: Re: Nonsensical Web Log Entries Message-ID: <201103092006.p29K664k013470@mail.r-bonomi.com> In-Reply-To: <20110309152546.54D93106564A@hub.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> From owner-freebsd-questions@freebsd.org Wed Mar 9 10:40:23 2011 > Date: Wed, 09 Mar 2011 09:57:03 -0500 > To: freebsd-questions@freebsd.org > From: peter@vfemail.net > Subject: Nonsensical Web Log Entries > > > I was looking at my Web log this morning, and a bunch of nonsensical > entries like these caught my attention: > > 124.226.181.80 - - [09/Mar/2011:09:49:58 -0500] "GET http://www.yahoo.com/ HTTP/1.0" 301 294 "-" "Mozilla/4.0 (compatible; > MSIE 6.0; Windows NT 5.1; SV1)" > 123.10.97.102 - - [09/Mar/2011:09:50:01 -0500] "GET http://makeabank.com/faq.cgi HTTP/1.0" 404 3485 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" > 115.225.166.2 - > - [09/Mar/2011:09:50:04 -0500] "GET http://join1.winhundred.com/affiliate/link.php?ref=35840&productid=7178 HTTP/1.0" 404 3485 "http://www.wingclips.com/" "Mozilla/4.0 (compatible; > MSIE 6.0; Windows NT 5.1; SV1)" > 114.97.197.184 - - [09/Mar/2011:09:50:15 -0500] "GET http://www.tosunmail.com/proxyheader.php HTTP/1.0" 301 313 "http://www.cashsoldier.com/VerifyerLevel.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" > > Is my FreeBSD box serving as some kind of Web proxy? Your box is _not_ doing the proxying. that's why it's signalling errors for those requests. The perpetrators are _hoping_ you are running a misconfigured proxying front- end.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201103092006.p29K664k013470>